Question 1

The _______________ model is characterized by a multistep process in which the steps follow each other in a linear,one-way fashion,like water over a waterfall

Accepted Answer

waterfall

Question 2

In the secure development lifecycle,how must the specific security needs of software being developed be defined?

Accepted Answer

A) Coding phase 
B) Design phase 
C) Requirements phase 
D) Testing phase 
A) Coding phase 
B) Design phase 
C) Requirements phase 
D) Testing phase C

Question 3

Which type of error occurs when a program executes the error checking routine,prior to manipulating strings to a base form?

Accepted Answer

A) Canonicalization error 
B) Improper output handling 
C) Injection 
D) Buffer overflow 
A) Canonicalization error 
B) Improper output handling 
C) Injection 
D) Buffer overflow A

Question 4

The specific security needs of a program being developed should be defined in the design phase of the secure development lifecycle.

Accepted Answer

A) True 
 B)False

Question 5

Proper use of _______________ can provide a wealth of programmatic functionality,such as authentication,confidentiality,integrity,and nonrepudiation.

Accepted Answer

The answer of Proper use of _______________ can provide a...

Question 6

Generating true random numbers is a fairly trivial task.

Accepted Answer

A) True 
 B)False

Question 7

What is used to compare program responses to known inputs and comparison of the output to desired output?

Accepted Answer

A) Use cases 
B) Waterfall models 
C) Requirements testing 
D) Good practices 
A) Use cases 
B) Waterfall models 
C) Requirements testing 
D) Good practices

Question 8

What are the major types of coding errors and their root cause?

Accepted Answer

The most common coding error is a buffer

Question 9

What are the phases of the software development lifecycle?

Accepted Answer

Requiremen

Question 10

In the secure development lifecycle,employing use cases to compare program responses to known inputs,and then comparing the outputs to the desired outputs should take place in which phase?

Accepted Answer

A) Coding phase 
B) Design phase 
C) Requirements phase 
D) Testing phase 
A) Coding phase 
B) Design phase 
C) Requirements phase 
D) Testing phase

Question 11

Determining what needs to be accessed,and the appropriate level of permission for every item accessed is an example of what principle?

Accepted Answer

A) Least functionality 
B) Least privilege 
C) Least access 
D) Least rights 
A) Least functionality 
B) Least privilege 
C) Least access 
D) Least rights

Question 12

_______________ is the systematic application of a series of malformed inputs to test how the program responds.

Accepted Answer

The answer of _______________ is the systematic application of a...

Question 13

How can secure coding be incorporated into the software development process?

Accepted Answer

The requirements phase is the most impor

Question 14

In the secure development lifecycle,in which phase should minimizing the attack surface area take place?

Accepted Answer

A) Coding phase 
B) Design phase 
C) Requirements phase 
D) Testing phase 
A) Coding phase 
B) Design phase 
C) Requirements phase 
D) Testing phase

Question 15

The spiral model is characterized by iterative development,where requirements and solutions evolve through an ongoing collaboration between self-organizing,cross-functional teams.

Accepted Answer

A) True 
 B)False

Question 16

You are interviewing for a job as a software developer.The interviewer asks you to explain good software development practices.

Accepted Answer

Early testing helps resolve errors at an

Question 17

When the function of code is changed in an unintended way,it is an example of code injection.

Accepted Answer

A) True 
 B)False

Question 18

_______________,historically,has not been an integral part of the software development life cycle.

Accepted Answer

The answer of _______________,historically,has not been an integral part of...

Question 19

Which is related to a code injection error?

Accepted Answer

A) VB.NET 
B) SQL 
C) JavaScript 
D) C# 
A) VB.NET 
B) SQL 
C) JavaScript 
D) C#

Question 20

Cryptography is the solution to all security problems.

Accepted Answer

A) True 
 B)False

Exam 18: Secure Software Development

The _______________ model is characterized by a multistep process in which the steps follow each other in a linear,one-way fashion,like water over a waterfall

In the secure development lifecycle,how must the specific security needs of software being developed be defined?

Which type of error occurs when a program executes the error checking routine,prior to manipulating strings to a base form?

The specific security needs of a program being developed should be defined in the design phase of the secure development lifecycle.

Proper use of _______________ can provide a wealth of programmatic functionality,such as authentication,confidentiality,integrity,and nonrepudiation.

Generating true random numbers is a fairly trivial task.

What is used to compare program responses to known inputs and comparison of the output to desired output?

What are the major types of coding errors and their root cause?

What are the phases of the software development lifecycle?

In the secure development lifecycle,employing use cases to compare program responses to known inputs,and then comparing the outputs to the desired outputs should take place in which phase?

Determining what needs to be accessed,and the appropriate level of permission for every item accessed is an example of what principle?

_______________ is the systematic application of a series of malformed inputs to test how the program responds.

How can secure coding be incorporated into the software development process?

In the secure development lifecycle,in which phase should minimizing the attack surface area take place?

The spiral model is characterized by iterative development,where requirements and solutions evolve through an ongoing collaboration between self-organizing,cross-functional teams.

You are interviewing for a job as a software developer.The interviewer asks you to explain good software development practices.

When the function of code is changed in an unintended way,it is an example of code injection.

_______________,historically,has not been an integral part of the software development life cycle.

Which is related to a code injection error?

Cryptography is the solution to all security problems.

Introduction and Security Trends

General Security Concepts

Operational-Organizational Security

The Role of People in Security

Cryptography

Public Key Infrastructure

Standards and Protocols

Physical Security

Network Fundamentals

Infrastructure Security

Authentication and Remote Access

Wireless

Intrusion Detection Systems and Network Security

Baselines

Types of Attacks and Malicious Software

E-Mail and Instant Messaging

Web Components

Disaster Recovery, Business Continuity, and Organizational Policies

Risk Management

Change Management

Privilege Management

Computer Forensics

Legal Issues and Ethics

Privacy

Filters